Out-of-Bounds Vulnerability in rAthena MMORPG Server
CVE-2025-58750

8.2HIGH

Key Information:

Vendor

Rathena

Status
Rathena
Vendor
CVE Published:
9 September 2025

What is CVE-2025-58750?

The rAthena MMORPG server is susceptible to a serious out-of-bounds vulnerability due to a missing bound check in the 'chclif_parse_moveCharSlot' function. This flaw allows attackers to read and write memory beyond allocated boundaries by manipulating user input. The development team has addressed and resolved this issue in commit 0cc348b186bbcc3c604c17c39589a319f27d469b, enhancing the security of the server.

Affected Version(s)

rathena < 0cc348b

References

https://github.com/rathena/rathena/security/advisories/GH...
x_refsource_CONFIRM
https://github.com/rathena/rathena/commit/0cc348b186bbcc3...
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-58750 : Out-of-Bounds Vulnerability in rAthena MMORPG Server